TLDR: Okta has introduced new capabilities for its Identity Security Fabric, extending its robust identity management to include AI agents and other non-human identities. This initiative aims to provide comprehensive security, visibility, control, governance, and automation for all identities within an organization’s ecosystem, addressing the growing security challenges posed by the rapid adoption of generative AI.
Okta, a leading independent identity partner, announced on April 9, 2025, significant enhancements to its Okta Platform, introducing an ‘Identity Security Fabric’ designed to secure AI agents and a broad spectrum of non-human identities. This strategic move comes in response to the accelerating deployment of generative AI use cases, which often overlook the critical need for robust security and control over the proliferation of non-human identities.
The new Okta Platform capabilities aim to provide organizations with a unified, end-to-end identity security fabric. This fabric will enable businesses to manage and secure all types of identities—ranging from AI agents and API keys to traditional employee accounts—with the same level of visibility, control, governance, and automation. The company emphasizes that effective identity tools, including posture management, threat protection, privileged access, governance, and device access, are crucial for comprehensive security.
Key innovations include enhanced Identity Security Posture Management and Okta Privileged Access. These features offer a comprehensive solution for discovering, securing, and managing non-human identities such as service accounts, shared accounts, break-glass identities, API keys, access tokens, and automation tools. The goal is to ensure that AI-driven automation and machine-to-machine interactions adhere to Zero Trust policies, with continuous monitoring for risks and vulnerabilities.
Arnab Bose, Chief Product Officer, Okta Platform at Okta, highlighted the urgency of this development: “Amid the excitement of embracing the next wave of generative AI, companies are moving quickly to deploy agentic use cases, often overlooking the critical need to secure these systems and control the sprawl of non-human identities. By bringing these identities into the identity security fabric, the Okta Platform can help organizations secure the rising digital labor force with the same rigor and vigilance as the human workforce.”
Additionally, Okta is rolling out Separation of Duties (SoD) in Okta Identity Governance (OIG), available in GA preview. SoD policies are designed to prevent users from accumulating conflicting access permissions, thereby mitigating security risks, ensuring regulatory compliance, and reducing insider threats. New Secure Device Features, currently in Early Access under Okta Device Access and Adaptive MFA, further minimize MFA fatigue and credential theft risks by integrating device context and hardware protection for Zero Trust access control. These features gather signals from the customer’s ecosystem to inform access policies and continuous risk assessment.
Also Read:
- New Cross App Access Protocol Fortifies Enterprise AI Agent Security
- Okta’s Oktane 2025 Conference to Address Critical AI Governance and Security Gaps
The extensible nature of Okta’s Identity Security Fabric allows organizations to build best-in-breed security stacks and seamlessly connect disparate security tools across their enterprise, ensuring a more interconnected and integrated security posture.
